Benefits communication that survives procurement.
Five populations, three brands, two languages, one security review. Tobie runs the complex version of benefits communication: distinct content and branding per group, scoped with SSO/SCIM, governed by one oversight dashboard, with answers your security team can verify line by line.
At enterprise scale, the hard part is not the PDF.
A single benefits guide is a communication problem. Six of them, across sites, unions, and subsidiaries, is a governance problem. Most communication tools were never built for the second one.
One company, many populations
Hourly and salaried, union and non-union, acquired brands with their own plans. Send everyone the same materials and every group gets answers that are wrong for someone.
The security review is the sales cycle
At this size, the vendor decision runs through security, legal, and IT before it reaches HR. A tool that cannot answer the questionnaire precisely never goes live.
Rollouts stall at identity
Accounts managed by hand do not survive contact with a 10,000-person org chart. Without SSO and SCIM in the plan from day one, the rollout dies in IT's queue.
Built for the complex version.
Everything the platform does for one population, it does per population, on one governed foundation your team oversees from a single dashboard.
Multi-population content
Separate plan sets and eligibility rules per group, so every employee sees the benefits that are actually theirs.
Branding per group
Each population or subsidiary gets its own look, from one platform, so acquired brands keep feeling like themselves.
SSO/SCIM scoping
Access and group membership follow your identity provider, scoped with your IT team as part of the engagement.
Multilingual at scale
Content and assistant answers in Spanish and more, all grounded in the same approved source per population, never drifting apart.
Audit trail on every answer
Every assistant response is logged with its source citation, reviewable by role-based admins. Compliance can reconstruct any exchange.
Humans inside 24 hours
Support tickets are answered by real people within 24 hours, through rollout and every season after it.
Bring your security team. We come prepared.
We would rather show you the whole path than a badge. Our Security page states exactly where our certifications stand, lists every subprocessor publicly, and the packet your reviewers need is one email away.
SOC 2 posture, stated plainly
SOC 2-certified infrastructure across the stack; our own SOC 2 Type I is in progress, and we will always tell you exactly where it stands.
Data handling built for HR
Encryption in transit and at rest, tenant isolation via Postgres row-level security, 7-day conversation retention, and no training on your data.
The security packet, on request
Architecture overview, data-flow diagrams, control mappings, and subprocessor agreements, sent to your reviewers from security@tobie.team.
HIPAA under a signed BAA
We support your HIPAA obligations under a Business Associate Agreement, and the subprocessor list your legal team will ask about is already public.
Prove it small. Expand group by group.
No big-bang cutover. The rollout is staged so each population goes live on evidence from the one before it.
Guide Review, per population
Send the guides you already have. We map what each group can ask and show the experience working on your real documents.
Scope identity and groups
SSO/SCIM, plan sets, eligibility rules, and per-group branding are scoped with your IT and benefits teams before anything ships.
Pilot one population
One group goes live first. Your team reviews real questions, real answers, and real citations in the oversight dashboard.
Expand on evidence
The remaining populations roll out group by group, each on its own content, with the pilot's numbers making the case internally for you.
What procurement asks us.
Does Tobie support SSO and SCIM?
Yes, as part of an enterprise scoping. For multi-population, multi-site organizations we scope SSO and SCIM alongside your separate plan sets, eligibility rules, and per-group branding, so access and group membership stay in sync with your identity provider instead of being managed by hand. Bring your IT team to the scoping conversation and we will map it to your environment.
Can one Tobie deployment serve multiple employee populations?
Yes. That is the enterprise case Tobie is scoped for: distinct content, plan sets, eligibility rules, and branding per group, running on one governed platform. An hourly workforce and a corporate office can each get their own experience, while HR keeps one oversight dashboard and one source of truth per population.
Is Tobie HIPAA compliant?
We support your HIPAA obligations under a signed Business Associate Agreement. Tobie runs on SOC 2-certified infrastructure with encryption in transit and at rest, and our Security page states exactly where our own SOC 2 Type I stands rather than hiding behind a badge. Ask us for the BAA and the security packet together.
Is our data used to train AI models, and how is it isolated?
Your content is never used to train models. Conversation data carries a short 7-day retention window, and each customer is isolated at the database level using Postgres row-level security. Every answer the assistant gives is logged with its source citation, so your team can audit exactly what employees were told.
How does a security review work?
Send your questionnaire to security@tobie.team. We maintain a security packet for exactly this: an architecture overview, data-flow diagrams, control mappings, and our subprocessor agreements. The current subprocessor list is public on our Security page, and we notify customers in advance of material changes to it.
How is enterprise pricing handled?
Our standard pricing is published openly for employers with 250 to 5,000 employees. Above that band, or when populations and sites multiply, Enterprise is scoped to your structure: number of groups, plan sets, languages, and identity requirements. It starts the same way every engagement does, with a fixed-price Guide Review, so you see the product working on your own documents before anything is committed.
Start where enterprises start: with the documents.
Send one population's guide for a fixed-price Guide Review, and put your security questionnaire in front of us at the same time. Both moving in parallel is the fastest path to live.